Initial commit: OMSORG website + Mitarbeiter-App

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-13 20:03:22 +02:00
commit 8beb0fcf52
103 changed files with 7384 additions and 0 deletions
@@ -0,0 +1,63 @@
+<?php
+require_once __DIR__ . '/../lib/auth.php';
+require_once __DIR__ . '/../lib/upload.php';
+require_once __DIR__ . '/../lib/mail.php';
+require_login();
+
+if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+    header('Location: ../pages/stundennachweis.php');
+    exit;
+}
+
+$back    = '../pages/stundennachweis.php';
+$monat_m = trim($_POST['monat_m'] ?? '');
+$monat_j = trim($_POST['monat_j'] ?? '');
+
+if (!preg_match('/^\d{2}$/', $monat_m) || !preg_match('/^\d{4}$/', $monat_j)
+    || (int)$monat_m < 1 || (int)$monat_m > 12
+    || (int)$monat_j < 2020 || (int)$monat_j > 2099) {
+    redirect_error($back, 'Bitte einen gültigen Monat und ein gültiges Jahr auswählen.');
+}
+$monat = $monat_j . '-' . $monat_m;
+
+$dir = dirname(__DIR__) . '/uploads/';
+$up  = handle_upload($_FILES['datei'] ?? [], [
+    'allowed'  => UPLOAD_TYPES_PDF_IMG,
+    'dir'      => $dir,
+    'prefix'   => 'stundennachweis',
+    'messages' => [
+        'missing' => 'Bitte eine Datei hochladen.',
+        'ext'     => 'Dateityp nicht erlaubt. Erlaubt: PDF, JPG, PNG.',
+    ],
+]);
+if (!$up['ok']) {
+    redirect_error($back, $up['error']);
+}
+
+$safe_name     = $up['filename'];
+$original_name = $up['original_name'];
+$mime          = $up['mime'];
+
+$user_id = current_user()['id'];
+$now     = date('c');
+
+db()->prepare(
+    'INSERT INTO requests_stundennachweis
+        (user_id, status, admin_note, monat, filename, original_name, created_at, updated_at)
+     VALUES (?, \'pending\', \'\', ?, ?, ?, ?, ?)'
+)->execute([$user_id, $monat, $safe_name, $original_name, $now, $now]);
+
+$config      = require __DIR__ . '/../lib/config.php';
+smtp_send(
+    $config,
+    $config['mail_sabrina'],
+    'Neuer Stundennachweis: ' . current_name(),
+    "Ein Stundennachweis wurde hochgeladen.\n\n"
+        . 'Mitarbeiter: ' . current_name() . "\n"
+        . 'Monat: ' . $monat . "\n"
+        . 'Datei: ' . $original_name . "\n\n"
+        . "---\nGesendet über OMSORG Connect",
+    ['path' => $dir . $safe_name, 'name' => $original_name, 'mime' => $mime]
+);
+
+redirect_ok($back);